Do you have blockip-custom banaction defined in /etc/fail2ban/jail.conf /file ?
Bregs, Roman
Emanuel Gonzalez <emanuel_gonza...@live.com.ar
<mailto:emanuel_gonza...@live.com.ar>>:
> Helo, I have read all the documentation but I can not solve my problem.
>
> I create the file jail-custom.conf /etc/fail2ban/jail.d with this config:
>
> [rsyslog-maillog]
> enabled = true
> filter = maillog-custom
> bantime = 86400
> findtime = 600
> maxretry = 5
> #port = smtp,465,submission,imap3,imaps,pop3,pop3s
> port = imap3,imaps,pop3,pop3s
> # tail iniciar al final del log
> # para que no arranque a procesarlo desde el principio o desde donde se quedo
> logpath = /var/log/maillog tail
>
>
> [exim]
> enabled = true
> filter = exim
> port = smtp,465,submission
> bantime = 86400
> findtime = 600
> maxretry = 5
> #banaction = blockip-custom
> #action = %(action_)s
> action = blockip-custom
> logpath = /var/log/maillog
> backend = auto
> #journalmatch =
>
>
> The jail "rsyslog-maillog is work, but the exim jail not.
>
> tail -f /var/log/fail2ban.log
> 2018-01-16 15:20:58,599 fail2ban.actions [13905]: NOTICE
> [rsyslog-maillog] Ban 111.75.167.157
> 2018-01-16 15:21:05,610 fail2ban.actions [13905]: NOTICE
> [rsyslog-maillog] Ban 111.89.179.159
> 2018-01-16 15:21:06,830 fail2ban.actions [13905]: NOTICE
> [rsyslog-maillog] Ban 112.112.193.39
> 2018-01-16 15:21:13,871 fail2ban.actions [13905]: NOTICE
> [rsyslog-maillog] Ban 112.112.25.39
> 2018-01-16 15:21:14,643 fail2ban.actions [13905]: NOTICE
> [rsyslog-maillog] Ban 112.113.241.17
> 2018-01-16 15:21:15,435 fail2ban.actions [13905]: NOTICE
> [rsyslog-maillog] Ban 112.113.60.146
> 2018-01-16 15:21:17,246 fail2ban.actions [13905]: NOTICE
> [rsyslog-maillog] Ban 112.113.60.247
> 2018-01-16 15:21:24,439 fail2ban.actions [13905]: NOTICE
> [rsyslog-maillog] Ban 112.113.60.38
> 2018-01-16 15:21:25,222 fail2ban.actions [13905]: NOTICE
> [rsyslog-maillog] Ban 112.113.61.121
> 2018-01-16 15:21:26,009 fail2ban.actions [13905]: NOTICE
> [rsyslog-maillog] Ban 112.113.61.183
>
> any ideas? regards
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org <http://slashdot.org/>!
> http://sdm.link/slashdot
> <http://sdm.link/slashdot>_______________________________________________
> Fail2ban-users mailing list
> Fail2ban-users@lists.sourceforge.net
> <mailto:Fail2ban-users@lists.sourceforge.net>
> https://lists.sourceforge.net/lists/listinfo/fail2ban-users
> <https://lists.sourceforge.net/lists/listinfo/fail2ban-users>
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Fail2ban-users mailing list
Fail2ban-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fail2ban-users
